CVE-2017-8700Medium
ASP.NET Core Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
An information disclosure vulnerability exists in ASP.NET Core that allows bypassing Cross-origin Resource Sharing (CORS) configurations. An attacker who successfully exploited the vulnerability could retrieve content, that is normally restricted, from a web application. The security update addresses the vulnerability by enforcing CORS configuration to prevent its bypass.
🎯 Affected products2
- ASP.NET Core 1.0
- ASP.NET Core 1.1
✅ Remediation
KBCommit (Security Update)